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ABSTRACT : 

With the widespread adoption of cloud computing, tlte ability to record and account for the 
usage of cloud resources in a credible and verifiable way has become critical for cloud service 
providers and users alike. The success of such a billing system depends on several factors: the billing 
transactions must have integrity and non-repudiation capabilities; the billing transactions must be non 
obstructive and have a minimal computation cost; and the service level agreement (SLA) monitoring 
should be provided in a trusted manner. Existing billing systems are limited in terms of security 
capabilities or computational overhead. In this paper, we propose a secure and non-obstructive billing 
system called THEMIS as a remedy for these limitations. The system uses a novel concept of a cloud 
notary authority for the supervision of billing. The cloud notary authority generates mutually verifiable 
binding information that can be used to resolve future disputes between a user and a cloud service 
provider in a computationally efficient way. Furthermore, to provide a forgery -resistive SLA 
monitoring mechanism, we devised a SLA monitoring module enhanced with a trusted platform module 
(TPM), called S-Mon. The performance evaluation confirms that the overall latency of THEMIS billing 
transactions (avg. 4.89 ms) is much shorter than the latency of public key infrastructure (PKI)-based 
billing transactions (avg. 82.51 ms), though THEMIS guarantees identical security features as a PKI. 
This work has been undertaken on a real cloud computing service called iCube Cloud. 
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I. INTRODUCTION 

Cloud computing is an important transition that makes change in service oriented computing 
technology. Cloud service provider follows pay-as-you-go pricing approach which means consumer uses as 
many resources as he need and billed by the provider based on the resource consumed. CSP give a quality of 
service in the form of a service level agreement. For transparent billing, each billing transaction should be 
protected against forgery and false modifications. Although CSPs provide service billing records, they cannot 
provide trustworthiness. It is due to user or CSP can modify the billing records. In this case even a third party 
cannot confirm that the user's record is correct or CSPs record is correct. To overcome these limitations we 
introduced a secure billing system called THEMIS. For secure billing system THEMIS introduces a concept of 
cloud notary authority (CNA). CNA generates mutually verifiable binding information that can be used to 
resolve future disputes between user and CSP. This project will produce the secure billing through monitoring 
the service level agreement (SLA) by using the S-Mon module. CNA can get a service logs from S-Mon and 
stored it in a local repository for further reference. Even administrator of a cloud system cannot modify or 
falsify the data. 

II. EXISTING SYSTEM 

The billing systems with limited security concerns and the micropayment-based billing system require 
a relatively low level of computational complexity: the non obstructive billing transaction latency is 4.06 ms for 
the former and 4.70 ms for the latter. Nevertheless, these systems are inadequate in terms of transaction 
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integrity, non-repudiation, and trusted SLA monitoring. In spite of the consensus that PKI-based billing 
systems offer a high level of security through two security functions (excluding trustworthy SLA 
monitoring),the security comes at the price of extremely complex PKI operations. Consequently, when a PKI- 
based billing system is used in a cloud computing environment, the high computational complexity causes high 
deployment costs and a high operational overhead because the PKI operations must be performed by the user 
andtheCSP. 

III. PROPOSED WORK 

In this paper, we propose a secure and non obstructive billing system called THEMIS as a remedy for 
these limitations. The system uses a novel concept of a cloud notary authority for the supervision of billing. The 
cloud notary authority generates mutually verifiable binding information that can be used to resolve future 
disputes between a user and a cloud service provider in a computationally efficient way. 

IV. IMPLEMENTATION 

THEMIS Will use the components like Cloud service provider, User, Cloud Notary Authority and 
SLA Monitor to provide a mutually verifiable billing transaction without asymmetric key operations of any 
entities. The registration phase involves mutual authentication of the entities and the generation of a hash chain 
by each entity. The hash chain element of each entity is integrated into each billing transaction on a chain-by- 
chain basis; it enables the CNA to verify the correctness of the billing transaction. In addition, S Mon has a 
forgery-resistive SLA measuring and logging mechanism. THEMIS consequently supervises the billing; and, 
because of its objectivity, it is likely to be accepted by users and CSPs alike. The billing transactions can be 
performed in two types of transactions: a service check-in for starting a cloud service session and a service 
check-out for finalizing the service session. These two transactions can be made in a similar way. Each billing 
transaction is performed by the transmission of a message, called a fi-contract. A ^.-contract is a data structure 
that contains a hashed value of a billing context and the hash chain element of each entity. With the sole 
authority to decrypt both the fi-contract from the CSP and the ji-contract of the user, the CNA can act as a third 
party to verify the consistency of the billing context between the user and the CSP. 
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Figure 1. Architecture of THEMIS 

Fig. shows the overall process of the billing transaction with our billing system. The main steps are as 
follow: 

[1] The user generates a service check-in or check-out request message and sends it to the CSP. 
[2] The CSP uses an element from the CSP's hash chain to send the user a |a.-contract-CSP as a digital 
signature. 

[3] The user uses an element from the user's hash chain to generate a u-contract-User as a digital signature. The 
user then combines the (^-contract-User with u-contract-CSP and sends the combined (x-contract to the 
CNA. 
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[4] The CNA verifies the ^.-contract from the user, and generates mutually verifiable binding information of the 

user and the CSP to ensure the consistency of the ^.-contract. 
[5] The billing process is completed when the user and the CSP receive confirmation from the CNA. 
[6] Finally, in the case of a service check-in, the S-Mon of the user's cloud resource transmits authentication 

data of the S-Mon to the CNA. 

RESULTS 

Cloud Notary Authority Will ensure undeniable verification of any transaction between a cloud service 
user and a CSP. Mutually verifiable billing protocol replaces prohibitively expensive PKI operations without 
compromising the security level of the PKI, it significantly reduces the billing transaction overhead, we devised 
a forgery-resistive SLA measuring and logging mechanism. By integrating the module into each cloud resource, 
we made the billing transactions more objective and acceptable to users and CSPs. 

Conclusion 

THEMIS significantly reduces the billing transaction overhead. It provides a high securable and non 
obstructive billing system. Cloud Notary Authority (CNA) generates the bill with binding information. It acts as 
forgery-resistive SLA measuring and logging mechanism. So even administrator of a cloud system cannot 
modify or falsify the data. 
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